Lucene search
+L

197 matches found

NCSC
NCSC
added 2021/09/08 12:00 a.m.13 views

Vulnerability fixed in Nessus agent

Nessus Agent 8.3.0 and earlier contains multiple local vulnerabilities that would allow an authenticated, local administrator to execute specific executable code on the Nessus Agent host could execute. Tenable has made updates available for Nessus to address the vulnerability. More information ca...

7.2CVSS6.6AI score0.00303EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/09/08 12:00 a.m.11 views

Tenable Network Security Nessus 输入验证错误漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security. Tenable Network Security Nessus Agent suffers from an input validation error vulnerability that stems from Nessus Agent version 8.3.0 and earlier versions were found to contain multiple...

7.2CVSS6.5AI score0.00303EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/09/08 12:00 a.m.12 views

Tenable Network Security Nessus 输入验证错误漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. An input validation error vulnerability exists in Nessus Agent version 8.3.0 and prior versions, which can be exploited by an attacker to run a specific executable file on the Nessus...

7.2CVSS6.6AI score0.00303EPSS
SaveExploits0References4
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2021/09/07 5:56 p.m.38 views

[R1] Nessus Agent 8.3.1 Fixes Multiple Vulnerabilities

Nessus Agent 8.3.0 and earlier were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host...

2.5AI score
SaveExploits0
OSV
OSV
added 2021/07/21 3:15 p.m.9 views

CVE-2021-20106

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host...

6.5CVSS5.8AI score0.01294EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/21 3:15 p.m.29 views

CVE-2021-20106

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host...

8.5CVSS0.01294EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/21 3:15 p.m.24 views

Privilege escalation

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host...

8.5CVSS6.8AI score0.01294EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/21 3:15 p.m.6 views

CVE-2021-20106

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host...

8.5CVSS6.5AI score0.01294EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/21 10:20 a.m.63 views

CVE-2021-20106

CVE-2021-20106 affects Tenable Nessus Agent versions 8.2.5 and earlier. Root cause is insufficient validation during file uploads, enabling a Nessus administrator to upload a crafted file that escalates privileges on the Nessus host. Affected component: Nessus Agent (Windows/Linux/macOS as deploy...

8.5CVSS6.7AI score0.01294EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/07/02 12:00 a.m.23 views

Tenable Nessus Agent < 8.3.0 Privilege Escalation Vulnerability (TNS-2021-13)

Tenable Nessus Agent is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.5CVSS6.7AI score0.01294EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/30 12:00 a.m.11 views

Tenable Network Security Nessus 代码问题漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from US-based Tenable Network Security. A code issue vulnerability exists in Nessus Agent, which stems from the program's insufficient validation of files during file uploads, allowing a remote administrator user to...

8.5CVSS6.7AI score0.01294EPSS
SaveExploits0References4
NCSC
NCSC
added 2021/06/29 12:00 a.m.28 views

Vulnerabilities fixed in Nessus

Vulnerabilities have been fixed in Nessus. The vulnerabilities allow a locally authenticated malicious person with administrator privileges to obtain elevated privileges. The malicious party can use these privileges to execute specific Windows commands execute as the Nessus Agent host. Tenable ha...

6.7CVSS6.8AI score0.00473EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/06/29 12:00 a.m.60 views

Tenable Nessus Agent <= 8.2.5 Privilege Escalation (TNS-2021-13)

According to its self-reported version, the Tenable Nessus agent running on the remote host is prior or equal to 8.2.5. It is, therefore, affected by a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining...

8.5CVSS6.7AI score0.01294EPSS
SaveExploits0References2
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2021/06/28 10:28 p.m.26 views

[R1] Nessus Agent 8.3.0 Fixes One Vulnerability

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host...

5.6AI score
SaveExploits0
OSV
OSV
added 2021/06/28 11:15 a.m.6 views

CVE-2021-20100

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099...

6.7CVSS6.6AI score0.00473EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/28 11:15 a.m.8 views

CVE-2021-20099

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20100...

6.7CVSS6.6AI score0.00431EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/28 11:15 a.m.39 views

CVE-2021-20100

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099...

6.7CVSS0.00473EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/28 11:15 a.m.6 views

CVE-2021-20099

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20100...

6.7CVSS6.6AI score0.00431EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/06/28 11:15 a.m.7 views

CVE-2021-20100

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099...

6.7CVSS6.6AI score0.00473EPSS
SaveExploits0References2
Prion
Prion
added 2021/06/28 11:15 a.m.26 views

Privilege escalation

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20100...

4.6CVSS6.9AI score0.00473EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder